The term ‘Harvey Lets’ or ‘us’ or ‘we’ refers to the owner of the website whose registered office is 5 St Vincent Place, Glasgow, G1 2DH. The term ‘you’ refers to the user or viewer of our website.
The content of the pages of this website is for your general information and use only. It is subject to change without notice.
Neither we nor any third parties provide any warranty or guarantee as to the accuracy, timeliness, performance, completeness or suitability of the information and materials found or offered on this website for any particular purpose. You acknowledge that such information and materials may contain inaccuracies or errors and we expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.
We strive to be as accurate as possible, however, your use of any information or materials on this website is entirely at your own risk, for which we shall not be liable. It shall be your own responsibility to ensure that any products, services or information available through this website meet your specific requirements.
This website contains material which is owned by or licensed to us. This material includes, but is not limited to, the design, layout, look, appearance and graphics. Reproduction is prohibited other than in accordance with the copyright notice, which forms part of these terms and conditions.
All trademarks reproduced in this website which are not the property of, or licensed to, the operator are acknowledged on the website in the appropriate sections.
Unauthorised use of this website may give rise to a claim for damages and/or be a criminal offence.
From time to time this website may also include links to other websites. These links are provided for your convenience to provide further information. They do not signify that we endorse the website(s). We have no responsibility for the content of the linked website(s).
Your use of this website and any dispute arising out of such use of the website is subject to the laws of Scotland.
General Data Protection Regulation (GDPR)
It’s time to get clear about personal data
Your personal data is unique to you, and we have always been careful to protect your information, but it makes sense that you should have control over it too.
This is why a new law called General Data Protection Regulation (GDPR) is replacing the existing Data Protection Act.
The new rules mean we, like other businesses in the UK, will be making sure that we are clear on how we handle your data.
Our commitment to you
- HOW TO CONTACT US
- THE DATA WE COLLECT ABOUT YOU
- HOW IS YOUR PERSONAL DATA COLLECTED
- HOW WE USE YOUR PERSONAL DATA
- WHO HAS ACCESS TO YOUR INFORMATION
- DATA SECURITY
- DATA RETENTION
- YOUR LEGAL RIGHTS
HOW TO CONTACT US
Name of Data Privacy Manager: Douglas Harvey
Email address: firstname.lastname@example.org
Office address: 5 St Vincent Place, Glasgow. G1 2DH
Telephone no: 0141 204 1100
Under the GDPR (2018) you have the right to complain about the way we process your data. You can complain to us directly by email email@example.com and mark your email for the attention of the Data Protection Officer. You are also welcome to provide us with feedback. If you would like to take your complaint further, you are also able to complain directly to the ICO who will contact us on your behalf.
A data breach can occur at any point when handling personal data and we have reporting duties in the event of a data breach or potential breach occurring. Breaches which pose a risk to the rights and freedoms of the data subjects who are the subjects of the breach require to be reported externally to the ICO.
- As soon as the breach or potential breach has occurred, and in any event no later than six hours after it has occurred, the data breach must be recorded in writing of (i) what is the breach, (ii) how it occurred and (iii) what the likely impact of that breach is on any data subjects(s).
- We must seek to contain the breach by whatever means available.
- We must consider whether the breach is one which requires to be reported to the ICO.
- Notify third parties in accordance with the terms of any applicable data sharing agreements.
THE DATA WE COLLECT ABOUT YOU
We collect information directly from you when you choose us to manage your property, rent a property from us, call or email us or otherwise provide information directly to us. Examples of information we may collect directly from you include:
- Email address
- Postal address
- Telephone number(s)
- Date of birth
- Photo Identification
- Next of Kin details
- Car registration number
- Demographic information
- Payment information (such as a credit card) and bank account details
HOW IS YOUR PERSONAL DATA COLLECTED
We use different methods to collect data from you and about you including through:
- Direct interactions. You may give us your identity, contact and financial data by filling in forms or by corresponding with us by post, telephone, email or otherwise. This includes personal data you provide when you:
- apply for our products or services;
- request marketing to be sent to you; or
- give us some feedback.
- Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
Technical Data from the following parties:
- analytics providers such as Google based outside the EU;
- advertising networks inside OR outside the EU; and
- search information providers inside OR outside the EU.
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services inside OR outside the EU.
- Identity and Contact Data from data brokers or aggregators inside OR outside the EU.
- Identity and Contact Data from publicly available sources such as Companies House and the Electoral Register based inside the EU.
HOW WE USE YOU PERSONAL DATA
We use this information to provide you with the service you have asked of us. We need your personal details in order to process your application so that we can, for example, carry out background checks or inform the local council that a new tenant is moving in. As well as conducting the main business operation, we also use this information to keep you up to date with our products, offers and services. Examples of how we may use the information we collect include:
- To answer your questions or respond to your requests
- To provide previous tenants with references in the future
- Process rental payments an landlords fees
- Inform utility suppliers/local council
- Protect against or identify possible fraudulent transactions
- Enforce our Terms and Conditions and otherwise manage our business.
If we are to process your personal data in relation to the management of your property or because you are renting a property with us, we will do so because you have agreed (or are in the process of agreeing) a contract with us and have allowed us to do so. Where we need to process and retain your data, for example to retain financial records, we will do so in accordance with the legal obligation placed on us under law. HarveyLets will process your information in pursuance of our legitimate interests where we believe we have a product or service that may be of interest to you. This may take the form of a call-back or through specific marketing materials.
WHO HAS ACCESS TO YOUR INFORMATION
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:
- To estimate our audience size and usage pattern
- To store information about your preferences; this allows us to customise our site according to your individual interests
- To speed up your searches
- To recognise you when you return to our site
HarveyLets is committed to keeping personal information secure. We have implemented technical, administrative and physical procedures designed to protect personal information from loss, misuse or alteration. We limit access to personal information to those who have a business need. We keep personal information only for so long as deemed reasonably necessary.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
By law we have to keep basic information about our customers (including contact, identity, financial and transaction data) for seven years after they cease being customers for tax purposes.
YOUR LEGAL RIGHTS
You have several rights in relation to how we use your personal information. They are:
- Right of access – you have the right of access to your personal information. If you wish to receive a copy of the personal information we hold on you, you may make a data subject access request (DSAR).
- Right to request that your personal information be rectified – if your personal information is inaccurate or incomplete, you can request that it is corrected.
- Right to request erasure – you can ask for your information to be deleted or removed if there is not a compelling reason for HarveyLets to continue to have it.
- Right to restrict processing – you can ask that we block or suppress the processing of your personal information for certain reasons. This means that we are still permitted to keep your information – but only to ensure we don’t use it in the future for those reasons you have restricted.
- Right to data portability – you can ask for a copy of personal information for your own purposes to use across different service providers.
- Right to object – you can object to HarveyLets processing your personal information if you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information.
©Copyright 2018 Harvey & Donaldson Ltd t/a HarveyLets, Registered in Scotland No. 209605